CVE record · 1 source
CVE-2026-116242
CVSS 8.2pgAdmin 4 opens SSH tunnels with the sshtunnel library but gave it neither host_pkey_directories nor ssh_config_file, so it always loaded the…
- Vendor
- Pgadmin.Org
- Product
- pgAdmin 4
- CVSS v3.1
- 8.2 AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
- Weakness
- CWE-522, CWE-1188
- Exposure class
- Remote access
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
pgAdmin 4 opens SSH tunnels with the sshtunnel library but gave it neither host_pkey_directories nor ssh_config_file, so it always loaded the…
pgAdmin 4 opens SSH tunnels with the sshtunnel library but gave it neither host_pkey_directories nor ssh_config_file, so it always loaded the unencrypted private keys in ~/.ssh of the operating-system account running pgAdmin…